UDP traffic / QUIC transport parameter fingerprint

1f7a23748abd

QUIC transport parameter fingerprint. 32 datagrams in the last 30 days, last seen 2026-10-10 18:24 UTC.

A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.

Parameters as offered

1=30000,4=1048576,5=524288,6=524288,7=524288,8=100,9=100,e=8,f/8,grease

Datagrams

Source addresses

Networks

Countries

Destination ports

Traffic by type

QUIC

32 datagrams from 31 sources

Initial packets of HTTP/3 connections, decoded on the sensor.

QUIC 32

Latest QUIC datagram, to 443/udp

QUIC v1 Initial alpn=h3,h3-29

Destination ports

443/udp QUIC16
8443/udp QUIC16

QUIC clients (JA4)

q13i0310h3_55b375c5d22e_3db21c8b774f from 31 sources32

QUIC transport parameters

1f7a23748abd from 31 sources32

QUIC versions

Networks

AS211298 Driftnet Ltd from 31 sources32

Countries

GB United Kingdom32

Source addresses (unverified)

Address	Network	Cc	Sends	Datagrams	Last seen (UTC)
185.247.137.178	AS211298 Driftnet Ltd	GB	QUIC	2	2026-10-10 05:59
87.236.176.78	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:24
195.96.139.231	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:32
87.236.176.252	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:42
87.236.176.109	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 18:23
195.96.139.14	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:37
195.96.139.247	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 05:55
87.236.176.232	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:18
185.247.137.52	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:19
87.236.176.147	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:00
87.236.176.2	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 06:38
185.247.137.237	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 18:33
87.236.176.57	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-08 17:11
195.96.139.155	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 01:09
195.96.139.50	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 08:17
185.247.137.113	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-09 00:37
195.96.139.236	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-06 10:19
195.96.139.49	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 01:50
185.247.137.235	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-10 11:41
195.96.139.169	AS211298 Driftnet Ltd	GB	QUIC	1	2026-10-07 09:02

Latest datagrams

2026-10-10 18:24:2587.236.176.78to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 18:23:0987.236.176.109to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:42:3387.236.176.252to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 11:41:17185.247.137.235to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 05:59:41185.247.137.178to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-10 05:58:25185.247.137.163to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 06:38:3687.236.176.2to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 06:37:19195.96.139.14to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 05:55:02195.96.139.247to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 05:53:46195.96.139.228to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 00:38:26195.96.139.124to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-09 00:37:10185.247.137.113to 8443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-08 18:33:31185.247.137.237to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-08 18:32:15195.96.139.231to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29
2026-10-08 17:13:0887.236.176.45to 443/udpQUICGB
QUIC v1 Initial alpn=h3,h3-29

About this fingerprint

A hash of the QUIC transport parameters a client offers: which parameters it sends and the values it picks for flow-control limits, idle timeout and connection IDs. Parameter order and GREASE values are normalised before hashing. Two clients with the same TLS stack but different QUIC libraries usually differ here.